应用安全 - Web框架 - 数据库管理 - phpMyAdmin - 漏洞汇总

CVE-2019-18622

Date:
2019.10.28

类型：
SQL injection in Designer feature

影响范围：
phpMyAdmin versions prior to 4.9. are affected, at least as old as 4.7..

修复：
Upgrade to phpMyAdmin 4.9. or newer or apply patch listed below for versions older than 4.9.2
https://github.com/phpmyadmin/phpmyadmin/commit/ff541af95d7155d8dd326f331b5e248fea8e7111

CVE-2019-6799

Date:

2019.1.22

类型：

arbitrary file read vulnerability

影响范围：

4.x < 4.8.5

CVE-2019-6798

Date:
2019.1.

类型：
SQL injection 
影响范围：
.x < 4.8.